Menggodam Laman Web : Fck Editor Vunerability

Kaedah ini juga dekenali  " Open Cart OpenCart CMS (Web shop) Exploit”, ianya sudah lama tapi ramai yang masih tak tahu,jadi aku buat kan tutorial

1- Buka google dan taipkan   Dork ini:

• inurl:admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

ataupun

• nurl:Powered By OpenCart

Akan  keluar banyak ,pilih je mana-mana yang penting vulrn... macam contoh,aku dapat yang ini

      http://www.schoolshopper.com.au/

 jadi aku akan tambah ni kat belakang dia

Contoh

• http://www.schoolshopper.com.au/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

(Kadang-kadang ianya berubahcontoh: site.com/abc/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html)

Ia Akan jadi macam ni

Nampak Perkataan Connector :pilih PHP

sekarang uploadkan file deface anda dengan cara Choose File dan piliih fail anda

sekiranya fai deface anda bernama deface.html,maka ia akan jadi macam ni

• www.site.com/deface.html
• or
• www.site.com/shell.php

Ni contoh fail deface aku http://www.schoolshopper.com.au/farid_melancau2.html

ok,anda boleh tanyakan masalah anda disini

ni list web yang vurln pnyer,ade yg boleh lagi,ade yang tak boleh dah,ok....macam biasa,selamat berjaya...hahahah

• http://ruthsgarden.com/jaihind.html
• http://www.utahflowers.net/jaihind.html
• http://www.eesnet.org/jaihind.html
• http://bestonlinediscounts.net/
• http://wenrestaurant.com/
• http://ruthsgarden.com/
• http://www.utahflowers.net/
• http://www.inlove.my/
• http://megamall.com.pk/
• http://stefanyboutique.com/
• http://www.virtualgeorge.info/
• http://iphoneclone.biz/
• http://amourcristallis.com/
• http://www.eesnet.org/
• http://www.schoolshopper.com.au/
• http://www.mymaxi.nl/
• http://wiretek.net/
• http://shop.tjokgus.com/
• http://www.aquariumsystem.it/
• http://uae-shopper.com/
• http://organicjewelries.com/
• http://www.granmasantiques.com/
• http://avocadogenie.com/
• http://www.inputandanalysis.com
• http://eddiegifts.com/
• http://bestonlinediscounts.net/
• http://wenrestaurant.com/
• http://ruthsgarden.com/
• http://www.utahflowers.net?/
• http://www.inlove.my/
• http://megamall.com.pk/
• http://stefanyboutique.com?/
• http://www.inputandanalysis.com/
• http://www.virtualgeorge.info/
• http://iphoneclone.biz/
• http://amourcristallis.com?/
• http://www.eesnet.org/
• http://www.schoolshopper.com.au/
• http://www.mymaxi.nl/
• http://wiretek.net/
• http://shop.tjokgus.com/
• http://www.aquariumsystem.it/
• http://uae-shopper.com/
• http://organicjewelries.com/
• http://www.granmasantiques.com/
• http://avocadogenie.com/
• http://www.inputandanalysis.com/
• http://www.utahflowers.net/
• http://stefanyboutique.com/
• http://amourcristallis.com/

Categories: Hacking, IT, New